[apify-deps]

Summary

Dependency sweep — security bumps + in-range freshening:

• rimraf 6.1.3 → 6.1.4 (pulls glob 13.0.6 → 14.0.4, which pulls minimatch → 11.0.5 — fixes one vulnerable copy of alert #171)
• markdownlint 0.42.0 → 0.42.1, oxlint 1.90.0 → 1.92.0, oxlint-tsgolint 7.0.2005 → 7.0.2006 (in-range freshening, website/)
• uv.lock broad refresh dropped: it bumped ty 0.0.95 → 0.0.99, which renamed a lint rule (unresolved-import → import-not-found) and turned the pyproject.toml config referencing the old name into a hard CI failure on every Python version's type-check job. Reverted to keep the PR green; no alert lives in uv.lock so nothing security-relevant was lost.

🚩 Flagged — needs review

• minimatch 9.0.9 (medium) — CAPPED by typedoc@0.26.11 (declared ^9.0.5, pulled in by @apify/docusaurus-plugin-typedoc-api@5.1.16, which is already the latest published version and still requires typedoc ^0.26.11); needs a new override or an upstream major bump of the typedoc-api plugin. (alert #171)
• minimatch 10.2.6 (medium) — CAPPED by markdownlint-cli@0.50.0 (already latest, still declares ~10.2.6); needs a new override or an upstream bump. (alert #171)
• tinypool 1.1.1 (critical, prototype-pollution → RCE) — CAPPED by @docusaurus/core@3.10.2 (latest stable; next major is canary-only 4.0.0-canary-*, no stable release yet) which declares ^1.0.2; forcing 2.1.2+ needs a new override outside that consumer's declared range. (alert #163, alert #162)
• decode-uri-component 0.4.1 (high / medium) — CAPPED by query-string@8.2.0 (own direct dep, declares ^0.4.1), pulled in via @apify/ui-library@1.176.0 (latest, still on query-string ^8.1.0); query-string@10.0.0 drops this dependency entirely but that's a major bump not yet taken upstream. Needs a new override or an upstream query-string major bump in @apify/ui-library. (alert #168, alert #158)

No matching open Renovate PR found for any of the above.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.73%. Comparing base (503d9d9) to head (64f1eef).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1211      +/-   ##
==========================================
- Coverage   95.74%   95.73%   -0.02%     
==========================================
  Files          63       63              
  Lines        6676     6676              
==========================================
- Hits         6392     6391       -1     
- Misses        284      285       +1     

Flag	Coverage Δ
integration	91.05% <ø> (-0.18%)	⬇️
unit	90.68% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[vdusek]

Superseded by #1212 (lock file maintenance), which already brought the same lockfile versions to master, including rimraf 6.1.4. Closing.

✍️ Drafted by Claude Code